$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145833.roa File: AS145833.roa (raw, json) Hash identifier: h2whUI8lCpQvouf/M1iHBJBy4QUI4K2yYXtHVuvP+0U= Subject key identifier: 4C:16:AD:18:05:0F:3C:99:3C:65:0E:25:E8:F4:2E:C9:47:A6:EC:B8 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7C8555C730625120FEC3BA89670B13F3E3974F52 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145833.roa Signing time: Wed 04 Mar 2026 06:30:18 +0000 ROA not before: Wed 04 Mar 2026 06:25:18 +0000 ROA not after: Wed 03 Mar 2027 06:30:18 +0000 asID: 145833 IP address blocks: 240a:ac6f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:85:55:c7:30:62:51:20:fe:c3:ba:89:67:0b:13:f3:e3:97:4f:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:18 2026 GMT Not After : Mar 3 06:30:18 2027 GMT Subject: CN=4C16AD18050F3C993C650E25E8F42EC947A6ECB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:14:44:da:36:9a:65:a4:f6:a6:ba:49:35:48: 80:92:e8:2c:f3:f8:3e:f2:bd:11:05:50:f2:35:c6: 53:4d:64:3c:eb:50:56:2d:a2:a4:8b:ac:6f:7e:d9: 2b:54:11:9c:61:f8:a7:6d:db:64:1c:d4:61:6a:17: 13:d9:89:36:fb:bb:65:33:9b:1b:b5:a3:ec:ce:4c: f7:e6:fa:cf:8f:a8:f7:5c:91:c4:7c:4c:cd:bd:31: cf:67:33:e5:a3:db:70:e7:bb:fa:74:1d:5d:e3:5b: 7d:b1:c2:1c:51:15:28:f0:8e:54:bc:48:75:d2:48: 9d:e1:ca:74:4d:94:df:9c:d6:fd:48:e3:e4:76:56: 82:b3:e5:9e:63:68:c5:d6:e0:c1:e5:84:96:53:db: 6b:d6:91:6b:4c:3e:a6:37:8a:52:1e:38:7e:fa:7e: b4:b3:bc:e8:56:00:dd:49:d9:27:9c:8e:df:61:ba: 9a:b9:71:2c:8f:64:bd:7f:eb:1e:c9:a1:b2:78:63: 12:a9:ed:6a:11:02:31:30:54:22:cb:ed:77:81:93: 73:33:39:a1:56:3a:e9:40:a6:55:b0:ab:f9:19:64: eb:16:18:30:ca:37:9e:14:4b:d0:4c:38:6a:d3:50: cb:60:6e:25:b8:65:d5:12:f9:f2:e7:8a:c9:31:a0: 77:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:16:AD:18:05:0F:3C:99:3C:65:0E:25:E8:F4:2E:C9:47:A6:EC:B8 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac6f::/32 Signature Algorithm: sha256WithRSAEncryption 04:53:8f:35:d5:7c:75:d8:60:fb:38:ad:02:b5:a2:b2:b5:97: 83:28:4a:2a:19:fd:05:55:7a:93:58:71:68:96:9a:df:0f:b0: 7b:bb:76:5b:7d:b1:1f:a9:50:0f:bc:5d:25:eb:c0:80:6b:a3: ec:99:df:2c:e1:2b:51:49:d7:0c:33:3e:1b:04:ad:62:52:1f: 64:37:fe:9a:19:40:3e:07:16:5a:a0:60:15:4a:79:cc:a7:44: f5:e7:89:31:f8:76:ca:ae:37:db:a1:d5:d9:3e:ad:56:02:e4: 0a:22:68:21:95:14:c2:8e:6e:83:8e:34:03:17:b8:74:19:c9: 41:33:ae:78:46:4e:84:a0:fd:31:9a:f9:70:30:8c:e1:a8:3b: 26:65:4c:8d:4b:e8:d3:3a:09:2b:12:02:9e:e7:a1:78:08:58: 72:e8:fc:2d:60:84:26:0a:18:a6:eb:97:27:64:d8:2c:95:25: 07:46:f6:f5:f9:e0:ba:1b:c3:a6:ee:84:1e:7c:b8:17:4f:c1: 76:86:c7:b4:8e:8d:9d:f4:6f:8d:48:03:6b:22:5b:36:f8:f9: fd:08:11:cc:09:56:2e:6a:0d:e9:1f:31:b9:4e:bc:13:1f:45: 93:b3:62:3b:95:1a:41:ff:b8:04:bc:6e:c5:34:11:cc:e3:fb: 2c:aa:5a:01 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUfIVVxzBiUSD+w7qJZwsT8+OXT1IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUxOFoX DTI3MDMwMzA2MzAxOFowMzExMC8GA1UEAxMoNEMxNkFEMTgwNTBGM0M5OTNDNjUw RTI1RThGNDJFQzk0N0E2RUNCODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOEURNo2mmWk9qa6STVIgJLoLPP4PvK9EQVQ8jXGU01kPOtQVi2ipIusb37Z K1QRnGH4p23bZBzUYWoXE9mJNvu7ZTObG7Wj7M5M9+b6z4+o91yRxHxMzb0xz2cz 5aPbcOe7+nQdXeNbfbHCHFEVKPCOVLxIddJIneHKdE2U35zW/Ujj5HZWgrPlnmNo xdbgweWEllPba9aRa0w+pjeKUh44fvp+tLO86FYA3UnZJ5yO32G6mrlxLI9kvX/r HsmhsnhjEqntahECMTBUIsvtd4GTczM5oVY66UCmVbCr+Rlk6xYYMMo3nhRL0Ew4 atNQy2BuJbhl1RL58ueKyTGgd+UCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRMFq0Y BQ88mTxlDiXo9C7JR6bsuDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTgzMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rG8wDQYJKoZIhvcNAQELBQADggEBAARTjzXVfHXYYPs4rQK1orK1l4MoSioZ/QVV epNYcWiWmt8PsHu7dlt9sR+pUA+8XSXrwIBro+yZ3yzhK1FJ1wwzPhsErWJSH2Q3 /poZQD4HFlqgYBVKecynRPXniTH4dsquN9uh1dk+rVYC5AoiaCGVFMKOboOONAMX uHQZyUEzrnhGToSg/TGa+XAwjOGoOyZlTI1L6NM6CSsSAp7noXgIWHLo/C1ghCYK GKbrlydk2CyVJQdG9vX54Lobw6buhB58uBdPwXaGx7SOjZ30b41IA2siWzb4+f0I EcwJVi5qDekfMblOvBMfRZOzYjuVGkH/uAS8bsU0Eczj+yyqWgE= -----END CERTIFICATE-----Generated at Sat Mar 28 13:15:19 2026 by rpki-client